acl (system view)

Function

The acl command creates an ACL and displays the ACL view.

The undo acl command deletes the ACL.

Format

acl [ number ] acl-number [ vpn-instance vpn-instance-name ]

undo acl { all | [ number ] acl-number }

Parameters

Parameter	Description	Value
number	Indicates the ACL number.	-
acl-number	Specifies the number of an ACL.	It is an integer ranging from 2000 to 3999. Basic ACLs range from 2000 to 2999. Advanced ACLs range from 3000 to 3999.
vpn-instance vpn-instance-name	Specifies the name of a VPN instance.	The value must be the name of an existing vpn-instance.
all	Indicates that all configured ACLs are deleted.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

If any ACL is being referenced, none of ACLs is deleted after the undo acl command is run. To delete the ACLs, remove the reference relationship and run the undo acl command.

An ACL is composed of several rules, which are deny and permit clauses. Before configuring the rules for an ACL, create the ACL.

Example

# Create ACL 2000.

<sysname> system-view
[sysname] acl number 2000
[sysname-acl-basic-2000]